IT Security Professional II

Joining the Metallus team means becoming part of a legacy that dates back over a century. We are an industry leader, manufacturing the cleanest steel in the world for companies in the industrial, aerospace and defense, automotive, and energy markets.

This role is eligible for our hybrid work policy.

This role is not eligible for relocation.

This employee is responsible for helping provide system security services across the enterprise for more than one functional area. In this position, the employee will assist in maintaining compliance with Metallus security policies, privacy laws and other applicable regulatory/compliance laws. This role will also be responsible for day‑to‑day operations, small project leadership, and security tool maintenance. Other responsibilities in this role include assisting with the analysis of new software technologies along with the deployment to implement these technologies.

• This position will be required to act as an individual contributor aiding day-to-day and project work.
• On occasion, this position will be asked to lead small cybersecurity projects.
• The general responsibilities will include monitoring & acting within the defined security operations, assisting in cyber security projects, & executing tactics that align with the strategic imperatives set by IT leadership.
• This employee may be responsible for reviewing, updating, or creating policies company information security policies. Working with the appropriate parties in the company, the employee will receive proper authorization to publish new and/or revised policies.
• This employee will be responsible for timely responses to security operations alerts.
• This employee will evaluate and consult on security threats associated with various software platforms within the organization to measure and evaluate associated risks with such software platforms. This employee will evaluate technological solutions and provide recommendations for the most secure way to implement these solutions.
• This position will be responsible for Operational Technology security and will be asked to provide recommendations on tooling, best practices, and standardized metric development.

• Basic understanding of Firewalls, Proxies, SIEM, Anti-Virus, and IDS/IPS.
• Familiarization with concepts such as least privilege, privilege escalation, and defense in depth.
• Understanding of routing and switching, endpoint protections, physical security, cryptography, operational security, identity and access management, firewall and IDS/IPS technologies.
• Basic understanding of IT network technologies and protocols, storage, virtual servers, security devices, and databases, etc.
• The ability to work independently or with a team.
• Basic understanding of an Information Security Framework. For example, NIST, ISO 27001/27002.
• Solid understanding of operational technology security principles.

Associate's degree in Computer Science, MIS, or Cybersecurity with at least 4 years of experience working in the Computer Science, MIS, CIS, or Cybersecurity field.

• Bachelor's of Computer Science, MIS, or Cybersecurity with at least 2 years of experience working in the Computer Science, MIS, CIS, or Cybersecurity field.
• Master's of Computer Science, MIS, or Cybersecurity with at least 1 year of experience working in the Computer Science, MIS, CIS, or Cybersecurity field.

The company prohibits harassment or discrimination against any employee on the basis of any status protected by law, including, but not limited to, race, religion, color, national origin, ancestry, age, disability, genetic information, gender, sex or veteran status.